Privacy Policy

Last updated: 1 November 2026

1. Controller

netvalue GmbH
Selmattenstrasse 25
8215 Hallau
Switzerland

2. Scope

This policy covers the CryptDMG app for iPhone and iPad and the CryptDMG pages at goldstein.digital/cryptdmg. The GOLDSTEIN.DIGITAL privacy policy covers the other pages of goldstein.digital. The Swiss Federal Act on Data Protection (FADP) applies and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Principle

CryptDMG processes your disk images, files and passwords only on your device. The app needs no account, has no server of its own and sends no content, file names or passwords to us or to anyone else.

4. Images and files

Imported and newly created images are stored in the app's own folder on your device; you see it in the Files app under “On My iPhone” or “On My iPad”. Linked images stay where you chose (for example iCloud Drive); the app only keeps a reference to them. The terms of the respective provider apply to locations such as iCloud Drive.

For previews and sharing, the app decrypts single files into a temporary folder with complete file protection. These copies are deleted as soon as you lock an image or leave the app.

5. Passwords and Face ID

CryptDMG stores a password only if you turn on “Remember with Face ID”. It is then kept in this device's keychain, protected by Face ID, Touch ID or your device passcode, and not synced through iCloud. iOS performs face and fingerprint recognition; the app receives no biometric data.

6. Photos

You add photos and videos through the iOS photo picker. The app receives only the items you select and no access to your whole library.

7. In-app purchases

Purchases are made and paid through Apple's App Store. We receive no payment data. The app checks purchases on your device through Apple's interface (StoreKit). Apple's privacy policy applies to that.

8. No ads, no tracking

The app contains no ads, no tracking or analytics tools and no advertising identifier. The CryptDMG pages use no cookies and no audience measurement.

9. Website and hosting

The pages are hosted by Hostinger International Ltd., Jonavos g. 60C, Kaunas, Lithuania (servers in the EU). The host collects technically necessary server log files (shortened IP address, date and time, page, browser, operating system, referrer). The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR / Art. 31(1) FADP). A data processing agreement under Art. 28 GDPR is in place.

10. Contact by email

If you write to support, we use your details only to reply and delete them when no longer needed. Please never send us passwords or images with confidential content.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Switzerland, the FDPIC). Because the app sends no data to us, we hold no data about you apart from support requests.

12. Changes

We update this policy when the app or the law changes. The version published here applies. The German version is legally binding.